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(57) An eloctronic mail (email) iyatem allows a u&ar to specify a delete time for automatically deleting an 
email massage. Depending i>n tne Implementation, the user may be the sender of the message, the recipient, 
or the system administrator Thq delate time may be specified as a duration of time following receipt of the 
message or as a specified diita time. In either case, when the specified delete time expires, the computer 
that received and stored the meisage to memory automatically deletes the message. In this waVi control can 
be exercised to prevent the l|ndeflntte retention of email messages that may contain sensitive or other 
confidential information. 
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Field of the Inventic n 



The present 
electronic mail (email) 



SPECIFIABLE DELETE TIMES FOR EMAIL MESSAGES 



inve^ition relates to computer networks chat support the transmission of 
mtesagcs between nodes of the network. 



This is a cont{inu4tion 
7^5/97 as attorney d|)ck0t 
reference. 



pescriotion of the Rtlat^d Art 



i-in-part of co-pending application serial number 08/900,793, filed on 
no. Yaker 7. the teachings of which arc incorporated herein by 



10 . Typical computer! net works allow a user (i.e., an email sender) to send an email message lo 

one or more other use; ^s (iie., email recipients), who can then each decide independently if and when 
of ^ email message. After an email message is read by a recipient, the 
the loption of deleting the message or saving the message for future use. In 



to read his or her cop> 
recipient typically has 



some email systems, althojugh a message has beoi deleted, it can still be recovered from an 
I S dectronic "trash bin" :ont|dining such deleted messages. Only when the user explicitly empucs the 
trash will email nriessages |>ecome irretrievable by the user. Some systems allow users to select on 
option whereby the trash i| emptied whenever the user logs out of the pmail system, but this option 
is typically disabled by default 



One 

deletes a message and 
indefinitely b the 
contains sensitive or 



C(l] 



of the drawbacks to conventional email systems is that, unless the recipient explicitly 
iiet^ if necessary, explicitly empties the trash, the message will be retained 
men ory (of his or her computer* This can be problematic when email mcssai^cs 
infl<kential material. 



. The present in *ention is directed to an email system that allows a user to instruct (he 
sysletn to automaticall]r delete an email message after a specified time or duration. Depending on 
the options provided in a p^icular implementation of such an email system, the user may be the 
sender of an emiait mes sagei, the recipient, or the sx stcm administrator. Again, depending on the 
implementation, this ai tontaltc message deletion may apply only to messages that have been read 
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by the recipient or it nkay ipply to an>* message whether or not the message has been read by the 
recipient 

In one embod inci|it of the invention, the present invention is a method and apparatus for 
processing email mesj agejs by a computer. An email message is received and stored into memory, 
wherein a user-specift ;d 4clcte time is or has been assigned for the message. The message is then 
automatically deleted GroiA the memory after expiration of the delete time. 

Brief DMcription Of Thf Drawings 



Fig. 1 shows II block diagram of an email messasirig system, according to one embodiment 
of the present inventic n; 

Fig. 2 shows I flclw diagram of the processing implemented by the system of Fig. 1 related 
to the preparation and sending of on email message; and 



Fig. 3 shows 
to the receipt and 



I flcjw diagram of the processing implemented by the system of Fig. I rclaicd 
hanilin^ of an email message. 



DatailfedDfeicriptior 



The present iiivetition addresses a security problem related to email systems. In particular, 
an email system of tb ; pr^ent invention enables a user to specify a time for deleting an email 
message. The tiser niay tie the sender of the message, a recipient of the message, or the system 
administrator for the < :om|puter network. The delete time may be specified in terms of a particular 
duration of time, e.g., a n^ber of hours, days, or weeks, after transmission or receipt of the 
message. Alternatively, delete time may be specified in terms of a time and date by hour, Jay. 
month, and year. In < me imbodimcnt. the sender of the email message has the abiiit>' to spccily the 
delete time when prqiarixjig the message. Alternatively or in addition, each recipient can spccifs a 
defaute delete time for ea^h email message he or she receives or a specific delete time for each 
different email message 4s the recipient reads that message. The 5>'stcm administrator mav also be 
able to specify defau t dejiete times, including different delete times for diHerent network users 
Tj'pically, default deicte times, whether set by recipients or sy stem administrators, uould he iii 
terms of a particular duration of time rather than a time and date. 



Fig. I shows 
preparation 



a block diagram of a node 100 of a computer network supporting the 
and sending of outgoing email messages to one or more other network users well as 
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the receipt and hand ing jof incoming email messages from other network users, according lo one 
embodiment of the { re$<|nt invention. The computer network can be any suitable type of computer 
network, such as a k»cal network or intranet or a wide area network or internet. Simitar, node 
100 can be any suitable fypc of compuur such as a desktop personal computer or a workstation. 
The basic block diag rami uf Fig. 1 shows the general functionality supported by a node of an email 
system. 

In particular, trahsmitter 104 of Fig. I uansmits outgoing email messages from node 100, 
receiver 106 receive! indDming email messages, and memory 108 stores incoming email messages. 
Processor 102 coon inaljes the activities of the other components of node 100, including the 
preparation and tram ;mis|sion of outgoing email messages as welt as the receipt, storage, reading, 
and deleting of incor lingj email messages. Depending on the implementation, an email system can 
be designed to provide some or all of the following options to network users: 

0 A sender od m e^tiail message can select a delete time (e.g., via either a specified date and 
time or a spe ctfi^d duration) for each outgoing message. 

0 The sender c m stt a default delete time in terms of a specified duration for each of hi s or 
her email messagjes. In addition, the sender can vaiy the delete time from message to 
message. 

0 The sender c m vMy the delete time from recipient to recipient for a single email message. 
0 The sender h is tijc option of specify ing that the message be deleted only after the message 



has beenreac! 



0 The sender h is tlie option of specif>'ing that the message be deleted as soon as it is read b\ 
a recipient, \^hedier or not the specified delete time has expired. 



o The recipient 



0 The recipient 



by Ithe recipient or whether or not the message has been read. 



or ^-stem administrator can set a default delete time (e.g., t>'piealU a 



specified dur itioi^) for all incoming messages. 



hasllhe option of specifying that the message be deleted either (a ) ont\ alter 



the message lias been read b>' the recipient or (b) whether or not the message has been read. 



0 The recipient 
recipient. 



canjset a specific delete time as each incoming message is read b> the 
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0 The recipien : caiji override a delete time specified by the sender. 



In any e\*cnt, assummg t^at the relevant conditions are met, aAer the expiration of a specified delete 
time, processor 102 ofFlg. 1 will automatically delete the corresponding email message, where 
"delete" may mean **inal<c the message unavailable to the recipient," in which case, it is equivalent 
to sending an email riessjage to a trash.bih and then empt>'ing the trash for conventional email 
systems. Depending on ihe implementation, the term "delete*' as understood for the present 
invention may also iinply an operation that completely erases the corresponding region of memor>' 
108, so that even systemiadministrators using special memory reconscniction routines cannot 
recover the message. 



Fig, 2 shows 
user is a sender of an 
invention. In that 
Fig. 2), optionally 
not that automatic 
email message to the 
embedded in the 



caite, 



speci 



emal 



Fig. 3 shows 
user is a recipient of 



a fl)t)w diagram of the processing implemented by node 100 of Fig. 1 \\hcn tlic 
outjgoing email message, according to one embodiment of the present 
, the user prepares an email message for one or more recipients (step 202 of 
if^ng an automatic delete time for the message (step 204) and uiiether or 
iitime applies to unread messages (step 206). The sender then transmits the 
rccjpient(s) (step 208), where the automatic deletion instructions are 
ntessage according to some appropriate specified protocol. 



de letei 



a dow diagram of the processing implemented by node 100 of Fig. I uhcn the 
: an incoming email message, according to one embodiment of the present 
invention. Prior to n ^ceiVing an email message, the recipient optionally specifies a default 
automatic delete timi s foif his or her incoming email messages (step 302 of Fig. 3) and whether ur 
not that automatic d< letcf time applies to unread messages (step 304). After the recipient rccciv cs 
on incoming email nr essige (step 306) and after expiration of the specified delete time, assuming 
all other conditions tit itiet (e.g.. a Hag has been set indicating that the message has been read \f 
only read messages \\xe tJo be deleted), the processor automatically deletes the message (:jiep 308 ) 

Each incoming 4mail message, uiih its embedded delete time information, is assigned a 
receipt time by the processor indicating the time of receipt of the email message by the recipient 
When the delete tim : is Specified as a particular date and time, the processor compares the delete 
time with the local time kept b\' the machine to determine when to delete the message. When the 
delete time is specif cd 4$ a particular duration (e.g.. in number of days or hours), the processor 
compares the local t me jto the sum of the mcssaj;c receipt time and the specified delete nine m 
determine when to dclet* the message 
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In addition ap|>lying at the individual computers where email messages are rcc:ei\'cd, the 
present invention cari als<^ be applied within computer servers that are responsible for storing and 
distributing email messajjes to individual recipients. 

It will be furt ler i^derstood that various changes in the details, materials, and 
arrangements of the parts |which have been described and illustrated in order to explain the nature 
of this invention may pe i^de by those skilled in the art widiout departing from the principle and 
scope of the invention as Expressed in the following claims. 
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I . A method fo r pr^essing electronic mail (email) messages by a computer, comprising ihe 
steps of: 

(a) receiving an ema^l message and storing the message into memory; 

5 (b) assigning a i ser-jspecified delete time Tor the message; and 

(c) automatical!:' deleting the message from the memory after expiration of the delete time. 

2* The invention of claim 1 , wherein die delete time is assigned ^vhen the message is prepared 
by a sender. 

3. The invention oflclaim 2, >vherein the delete time is explicitly selected by the sender for the 
[0 * message. 

4. The invention ofj claim 2^ wherein the delete time is a default delete time that is 
automatically assigned t^ the message when the sender prepares the message. 

5. The invention off claim 1, wherein the delete time is assigned afterthe message is received. 

6. The inventic n o(claim 5, wherein the delete time is explicitly selected by a rectpieni when 
IS the message is read. 

7. The inventic >n of claim i. wherein the delete lime is a default delete time that is 
automatically assigned the message when the message is received 

8. The inventi( m of claim I . wherein, after the expiration of the delete time, the message is 
ckleted only after it las been read. 

20 9. The invcniii m o|f claim I . w herein, after the expiration of the delete time, the message is 

deleted whether or r ot ii has been read 

10. The inventipn ojf claim I, wherein each email message can have a different delete lunc 

I I. An apporatlis rrtcthod for processing email messages, comprising: 
(a) means for receiving an email message and storing die message into memorv" 
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(b) means for a isigijiing a user^spccifLcd. delete time for the message; and . 

(c) means for a^toniatically deleting the message from the memon' af\er expiration of the 
delete time. 



12. An apparatus 



(b) a processor 
after expiration of a 



o 



bt processing email messages* comprising: 



(a) a memor>* d( vic^ adapted to store an email message: and 



jidapjted to automatically delete the stored message from the memory- device 
iserj-assigned delete time for the message. 



13. The inventto a of claim 12, wherein the delete time is assigned when the message is 
prepared by a sender 

14. The inventio \ oflclaim 13. wherein the delete time is explicitly selected by the sender for 
the message. 

15. The invention oflclaim 13, wherein the delete time is a default delete time that is 
automatically assigned to! the message ui\en the sender prepares the message. 



16. The inventio^ 
by the apparatus. 

17. Theim^entioiL 
the message is read. 

18. Theinventior 



20 19. Thcinventicm 

deleted by 



20. The invention 
deleted whether or nol 

21. The invention 



of jclaun 12, wherein the delete time is assigned after the message is rccci\ cd 



of <:Uim 16, wherein the delete time is explicitly selected by a recipient when 



of ^aim 16. wherein the delete time is a default delete time that is 



automatically assigned tolthe message by the processor when the message is received. 



of ^laim 1 2. w herein, alter the expiration of the delete time, the message is 
the processor o|nly after it has been read. 



of i/lditn 1 2. wherein, after the expiration of the delete time, the mcs.<aec is 
it hias been read 

of cjlaim 12. wherein each email message can have a different delete umc 
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